OpenAI
GRC Program Manager, Audit & Controls
$216K–$252K
San Francisco · Hybrid · Manager · Full-time · Posted Aug 6, 2026
- Education
- A specific degree is not required.
About the job
Own audits and improve reusable controls, evidence systems, and assurance workflows in partnership with technical and cross-functional teams.
What you'll do
- Lead audits from scoping through evidence review, fieldwork, remediation, and closeout.
- Build a common control framework and validate system scope, ownership, and evidence.
- Use Codex to automate assurance workflows and develop maintainable tools that improve audit operations.
What they ask for
- Direct ownership of meaningful audit, security, customer-assurance, or regulatory outcomes.
- Practical knowledge of control design, evidence, testing, operating effectiveness, and remediation.
- Technical fluency across cloud systems, identity, logging, APIs, data flows, and system boundaries.
- Ability to use Codex or comparable AI-assisted development tools and code, SQL, APIs, structured data, automation, or data workflows to solve operational problems.
Nice to have
- Knowledge of SOC 2, ISO 27001/27017, PCI DSS, NIST, or FedRAMP.
Pay
$216K – $252K USD base salary
Tools
Codex, SQL, APIs, SOC 2, ISO 27001/27017, PCI DSS, NIST, FedRAMP
AI focus
Use Codex or comparable AI-assisted development tools to build and test evidence checks, control mappings, request triage, owner workflows, monitoring, and remediation reporting.
Model-written summary · the original posting is authoritative